PT-2024-29007
CVE-2024-4073
·
تاريخ النشر
2024-04-23
·
تاريخ التحديث
2024-06-20
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Kashipara Online Furniture Shopping Ecommerce Website version 1.0
Description
A vulnerability was found in the Kashipara Online Furniture Shopping Ecommerce Website, affecting an unknown functionality of the file prodList.php. The manipulation of the
prodType argument leads to cross-site scripting. The attack can be launched remotely.Recommendations
For version 1.0, consider disabling the
prodType argument in the prodList.php file until a patch is available. Restrict access to the prodList.php file to minimize the risk of exploitation. Avoid using the prodType argument in the affected functionality until the issue is resolved.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾